Feb 14 200G 5:17PM YEE ft* ASSOCIATES, P ♦ C . 



(972) 385-7766 



p. 4 



AMENDMENTS TO THE CLAIMS: 

1 . (Previously Presented) A method of preventing a flooding attack on a network server in 
which a large number of connectionless datagrarits are received for queuing to a port on the 
network server, comprising: 

determining, in response to the arrival of a connectionless datagram from a host for a port 
on the network server, if the number of connectionless datagrams already queued to the port from 
the host exceeds a prescribed threshold; 

discarding the datagram, if the number of connectionless datagram already queued to the 
port from the host exceeds the prescribed threshold; and 

queuing the connectionless datagram to a queue slot of the port* if the number of 
connectionless datagram already queued to the port from the host does not exceed the prescribed 
threshold. 

2 . (Currently Amended) The method of claim 1 wherein the deteraiining if the number of 
datagrams already queued to the port from the host exceeds a prescribed threshold further 
comprises: 

calculating the prescribed threshold by multiplying a percentage [[P]] by the number of 
available queue slots for the port. 

3. (Currently Amended) An apparatus Apparatus for preventing a flooding attack on a 
network server in which a large number of datagrams are received for queuing to a port on the 
server, comprising: 

means for determining, in response to a datagram from a host for the port on the network 
server, if the number of datagrams queued on the port by the host exceeds a prescribed threshold; 

means reoponsivo to th e dgtennining-meaas for discarding the datagram, if the number of 
datagrams queued on the port by the host exceeds the prescribed threshold; and 

means for queuing the datagram to a queue slot of the port, if the number of datagrams 
queued on the port by the host does not exceed the prescribed threshold. 
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4. (Currently Amended) The apparatus of claim 3 wherein the means for determining if the 
number of datagrams already queued to the port from the host exceeds a prescribed threshold 
further comprises: 

means for calculating the prescribed threshold by multiplying a percentage [[P]] by a 
number of available queue slots for the port. 

5. (Currently Amended) A storage media containing program code that is operable by a 
computer for preventing a flooding attack on a network server in which a large number of 
datagrams are received for queuing to a port on the network server, the program code including 
instructions for causing the computer to execute the steps of: 

itetat»m«wg determining, in response to r eceiving a datagram from a host for the port ofl 
the n ^work server- if the number of datagrams already queued to the port from the host exceeds 
a prescribed threshold: threshold, in rooponoo to a datagram from a hoot for tho port on th e 
network carver; 

discarding the datagram, if the number of datagrams already queued to the port from the 
[[S]] host exceeds the prescribed threshold; and 

queuing the datagram to a queue slot of the port, if the number of datagrams already 
queued to the port from the [[S]] host does not exceed the prescribed threshold. 

6. (Currently Amended) The storage media of claim 5 wherein the program code includes 
farther instructions for causing the com p uter to execute the step oft farther oomprioinfl the qtep 
eft 

calculating the prescribed threshold by multiplying a percentage [[P]] by a number of 
available queue slots for the port. 

7. (Currently Amended) A carrier wave containing program code that is operable by a 
network server for preventing a flooding attack on the network server in which a large number of 
datagrams are received for queuing to a port on the server, the program code including 
instructions for causing the network server to execute the steps of: 

determining, in response to receipt of a datagram from the host for queuing to the port on 
the network server, if the number of datagrams already queued to the port from a host exceeds a 
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prescribed threshold; 

discarding the datagram, if the number of datagrams already queued to the port from the 
host exceeds the prescribed threshold; and 

queueing queuing the datagram to the port, if the number of datagrams already queued to 
the port from the host does not exceed the prescribed threshold. 

8 > (Currently Amended) Hie carrier wave of claim 7 wherein the program code further 
includes instructions for causing the network server to execute the step of: 

calculating the prescribed threshold by multiplying a percentage [[P]] by a number of 
available queue slots for the port. 

9 . (Previously Presented) The method of claim 1 further comprising: 

configuring a maximum number of connectionless datagrams allowed to be queued at the 

port. 

1 0. (Previously Presented) The method of claim 9 wherein the configuring step further 
includes configuring a controlling percentage of available queue slots remaining for the port; and 
wherein the prescribed threshold is based on the controlling percentage of available queue slots 
remaining for the port. 

1 1 . (Previously Presented) The method of claim 1 wherein the port comprises a plurality of 
queue slots, the method further comprising: 

maintaining a number of available queue slots of the plurality of queue slots for the port. 

12. (Previously Presented) The apparatus of claim 3 further comprising: 

a means for configuring a maximum number of connectionless datagrams allowed to be 
queued at the port. 

13. (Currently Amended) The apparatus of claim 12 wherein the means for configuring 
further comprises means for configuring a controlling percentage of available queue slots 
remaining for the port. 
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14. (Previously Presented) The storage media of claim 5 wherein the computer is the 
network server. 
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